HackingCustomer Data InvolvedIDENTITY_BASICLowContained
INSURANCE OFFICE OF AMERICA, INC.
bd_d25c427318091937 · schema v1 · pii pii-v1
Full breach record for INSURANCE OFFICE OF AMERICA, INC. →Insurance Office of America (IOA) reported an external system breach that occurred on June 25, 2025, and was discovered on January 11, 2026. The breach impacted 15 Maine residents. Affected individuals were notified on January 16, 2026, and offered 24 months of complimentary credit monitoring services through Epiq.
Leak gap clock⏱ Leak >90d5 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by daixin about this victim predates this filing by 126 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e3c12e2f5899425bLeak Sitedaixinfiled 2025-09-11(127d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_4c989eca675e1207California State AGfiled 2026-01-16Verified
- bd_23b7cd8d3b9c09b1Texas State AGfiled 2026-01-21(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/102f9510-eae4-457b-aea9-679fb73b3432.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 16, 2026
- Raw hash
- 7c713dd59e302391c3df3af1815f3587f8cfcdd071546d9ebd8ef429762cf03f
Reporting entity
- Name
- INSURANCE OFFICE OF AMERICA, INC.norm: insurance office of america
- Domain
- ioausa.com
Victim entity
- Name
- INSURANCE OFFICE OF AMERICA, INC.norm: insurance office of america
- Domain
- ioausa.com
Incident
- Discovered
- Jan 11, 2026
- Materiality determined
- —
- Notification sent
- Jan 16, 2026
- Affected individuals
- 15
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 days(5 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 5d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 11, 2026→ Filed with AG: Jan 16, 20265d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.